While modern electric vehicles are tested constantly for vulnerabilities, some of their essential accessories, such as the battery chargers, often remain neglected. Kaspersky Lab experts have discovered that electric vehicle (EV) chargers supplied by a major vendor carry vulnerabilities that can be exploited by cyber attackers, and that the consequences of a successful attack could include damage to the home electricity network.

 

Electric vehicles are a hot topic as their development makes a vital contribution to environmental sustainability. In some regions, public and private charging points are becoming commonplace.

 

The growing popularity of electric vehicles led Kaspersky Lab experts to check widely available domestic chargers that include a remote access feature. The researchers found that, if compromised, the connected charger could cause a power overload that would take down the network it was connected to, causing both financial impact and, in the worst-case scenario, damaging other devices connected to the network.

 

The researchers found a way to initiate commands on the charger and to either stop the charging processor or set it to the maximum current possible. While the first option would only prevent a person from using the car, the second one could potentially cause the wires to overheat on a device that is not protected by a trip fuse.

 

All an attacker needs to do to change the amount of electricity being consumed is obtain Wi-Fi access to the network the charger is connected to. Since the devices are made for domestic use, security for the wireless network is likely to be limited.

 

This means that attackers could gain access easily, for example by brute-forcing all possible password options, which is quite common: according to Kaspersky Lab statistics 94% of attacks on IoT in 2018 came from Telnet and SSH password brute-forcing.

 

Once inside the wireless network, the intruders can easily find the charger’s IP-address. This, in turn, will allow them to exploit any vulnerabilities and disrupt operations.

 

All the vulnerabilities found were reported to the vendor and have now been patched.

 

People often forget that in a targeted attack, cybercriminals always look for the least obvious elements to compromise in order to remain unnoticed. This is why it is very important to look for vulnerabilities, not just into unresearched technical innovations, but also in their accessories — they are usually a coveted prize for threat actors. As we have shown, vendors should be extra careful with connected vehicle devices, and initiate bug-bounties or ask cybersecurity experts to check their devices. In this case, we were fortunate to have a positive response and a rapid patch of the devices, which helped to prevent potential attacks,” said Dmitry Sklyar, a Security Researcher at Kaspersky Lab.

 

Kaspersky Lab recommends taking the following security measures:

 

  • Regularly update all your smart devices to the latest software versions. Updates may contain patches for critical vulnerabilities, which, if left unpatched, may give cybercriminals access to your house and private life.

 

  • Don’t use the default password for Wi-Fi routers and other devices, change it to strong ones and don’t use the same password for several devices.

 

  • We recommend isolating the smart home network from the network used by your or your family’s personal devices for basic Internet searching. This is to ensure that if a device is compromised with generic malware through a phishing email, your smart home system won’t be affected.

 

 

Read the full version of the report on Securelist.com.

 


RECOMMENDED ARTICLE FOR TECHWORLD


 
My Data Was Leaked. What Should I Do?
Techworld Date Posted: 22 January 2019 2:26 PM | 80 Views
Following the emergence last week of a massive database of exposed emails and passwords dubbed as Collection #1, Kaspersky Lab strongly urged internet users to apply unique passwords for each of their online accounts. See More
 
My Data Was Leaked. What Should I Do?
Techworld Date Posted: 2:26 PM | 80 Views
Following the emergence last week of a massive database of exposed emails and passwords dubbed as Collection #1, Kaspersky Lab strongly urged internet users to apply unique passwords for each of their online accountsSee More

 
UBTECH OPENS ROBOTICS SUMMER WORKSHOP
Techworld Date Posted: 8 May 2018 3:07 PM | 323 Views
The introduction and availability of programmable robots (Robotics) at brickand-mortar stores are still unrecognizable. For most, these robots are too expensive for a “toy” without even exploring its value and benefits to their kids,.... See More
 
UBTECH OPENS ROBOTICS SUMMER WORKSHOP
Techworld Date Posted: 3:07 PM | 323 Views
The introduction and availability of programmable robots (Robotics) at brickand-mortar stores are still unrecognizable. For most, these robots are too expensive for a “toy” without even exploring its value and benefits to their kids,...See More

PCBG Contributing Writer
The Genius Behind Threadripper
Techworld • By: PCBG Contributing Writer | Date Posted: 2 August 2017 10:12 AM | 317 Views
Lisa Su, for those in the dark, is a Silicon Valley genius. She is one of the biggest names in the semiconductor business, a notable Forbes name for one of the most creative female.... See More
PCBG Contributing Writer
The Genius Behind Threadripper
Techworld • By: PCBG Contributing Writer | Date Posted: 10:12 AM | 317 Views
Lisa Su, for those in the dark, is a Silicon Valley genius. She is one of the biggest names in the semiconductor business, a notable Forbes name for one of the most creative female...See More

 
ViewSonic to Showcase XG Series of Gaming Monitors at ESGS 2017
Techworld Date Posted: 25 October 2017 2:32 PM | 334 Views
ViewSonic Corp., a leading global provider of visual solution products, today announced it will be exhibiting its latest gaming monitors at the Electronic Sports and Gaming Summit (ESGS) 2017,. See More
 
ViewSonic to Showcase XG Series of Gaming Monitors at ESGS 2017
Techworld Date Posted: 2:32 PM | 334 Views
ViewSonic Corp., a leading global provider of visual solution products, today announced it will be exhibiting its latest gaming monitors at the Electronic Sports and Gaming Summit (ESGS) 2017,See More

 
Half of Businesses Find It Hard to Identify a Serious Security Breach. Do You?
Techworld Date Posted: 8 November 2017 4:53 PM | 325 Views
Prevention is still the main pillar of corporate cybersecurity, says the report ‘New Threats, New Mindset: Being Risk Ready in a World of Complex Attacks’ from Kaspersky Lab.. See More
 
Half of Businesses Find It Hard to Identify a Serious Security Breach. Do You?
Techworld Date Posted: 4:53 PM | 325 Views
Prevention is still the main pillar of corporate cybersecurity, says the report ‘New Threats, New Mindset: Being Risk Ready in a World of Complex Attacks’ from Kaspersky Lab.See More

 
Akamai Announces New Services, Research and Partnerships to Help Customers ‘Connect to Tomorrow’
Techworld Date Posted: 24 October 2017 2:20 PM | 318 Views
Akamai Technologies announced its vision for an integrated approach to delivering world class digital experiences at the ‘EDGE’ Conference – its annual customer event. With customers looking for the fastest online services backed by.... See More
 
Akamai Announces New Services, Research and Partnerships to Help Customers ‘Connect to Tomorrow’
Techworld Date Posted: 2:20 PM | 318 Views
Akamai Technologies announced its vision for an integrated approach to delivering world class digital experiences at the ‘EDGE’ Conference – its annual customer event. With customers looking for the fastest online services backed by...See More

 
SAP Calls for Public and Private Sector Organisations in the Philippines to Harness the Power of Data
Techworld Date Posted: 23 August 2017 1:34 PM | 310 Views
On photo: Ryan Poggi, Managing Director, SAP Philippines and Kathleen Muller, Head of Analytics and Insight, SAP Southeast Asia SAP SE (NYSE: SAP) said today it has harnessed its digital core, bold technologies of the.... See More
 
SAP Calls for Public and Private Sector Organisations in the Philippines to Harness the Power of Data
Techworld Date Posted: 1:34 PM | 310 Views
On photo: Ryan Poggi, Managing Director, SAP Philippines and Kathleen Muller, Head of Analytics and Insight, SAP Southeast Asia SAP SE (NYSE: SAP) said today it has harnessed its digital core, bold technologies of the...See More

 
Providing the Brain behind Electronic Eyes
Techworld Date Posted: 18 July 2017 3:03 PM | 6885 Views
XjeraLabs relies on NVIDIA Tesla technology to deliver automated, accurate video analytics to drive business and smart city insights XjeraLabs aims to be the leading artificial intelligence (AI) video analytics company in the world. Established.... See More
 
Providing the Brain behind Electronic Eyes
Techworld Date Posted: 3:03 PM | 6885 Views
XjeraLabs relies on NVIDIA Tesla technology to deliver automated, accurate video analytics to drive business and smart city insights XjeraLabs aims to be the leading artificial intelligence (AI) video analytics company in the world. Established...See More

 
CTO Reflections: Beyond the Appliance
Techworld Date Posted: 30 August 2017 3:46 PM | 244 Views
For anyone reading the news regularly, it's not hard to grasp that cyber threats are getting more sophisticated and damaging by the day. From a security technology provider's perspective, I can add that tackling.... See More
 
CTO Reflections: Beyond the Appliance
Techworld Date Posted: 3:46 PM | 244 Views
For anyone reading the news regularly, it's not hard to grasp that cyber threats are getting more sophisticated and damaging by the day. From a security technology provider's perspective, I can add that tackling...See More

 
D-Link’s Enhanced Wi-Fi Gigabit Routers, Security Cameras Deliver Improved Connectivity, Security
Techworld Date Posted: 20 March 2018 5:05 PM | 595 Views
Manila, Philippines – D-Link, one of the world’s biggest suppliers of home networking products, matches the growing demand for high-speed connectivity and improved home security with enhanced Wi-Fi gigabit routers and security cameras.. See More
 
D-Link’s Enhanced Wi-Fi Gigabit Routers, Security Cameras Deliver Improved Connectivity, Security
Techworld Date Posted: 5:05 PM | 595 Views
Manila, Philippines – D-Link, one of the world’s biggest suppliers of home networking products, matches the growing demand for high-speed connectivity and improved home security with enhanced Wi-Fi gigabit routers and security cameras.See More


Power by

Download Free AZ | Free Wordpress Themes